https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:17:34.297021+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0752 certfr-2026-avi-0752 — De multiples vulnérabilités ont été découvertes dans les produits Mattermost. Elles permettent à un attaquant de provoq… 2026-10-04T08:17:34.356149+00:00 certfr-2026-avi-0752 https://cve.radiocsirt.org/vuln/euvd-2026-336470 EUVD-2026-336470 2026-10-04T08:17:34.356193+00:00 EUVD-2026-336470 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10103 fkie_cve-2026-10103 2026-10-04T08:17:34.356208+00:00

Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to verify post ownership in the shared channel inbound sync handler, which allows an authenticated remote cluster to modify or delete posts authored by local users or other remotes via crafted sync messages referencing arbitrary post IDs in channels shared with that remote.. Mattermost Advisory ID: MMSA-2026-00689

 https://cve.radiocsirt.org/vuln/ghsa-4h7j-7xp4-wp5p GHSA-4h7j-7xp4-wp5p 2026-10-04T08:17:34.356241+00:00

Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10.11.19 fail to verify post ownership in the shared channel inbound sync handler, which allows an authenticated remote cluster to modify or delete posts authored by local users or other remotes via crafted sync messages referencing arbitrary post IDs in channels shared with that remote.. Mattermost Advisory ID: MMSA-2026-00689

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1932 WID-SEC-W-2026-1932 — Mattermost: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-04T08:17:34.356258+00:00

Ein Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.